vps-audit — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited vps-audit (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
All data collection runs in parallel via scripts/collect-vps.sh - SSH queries fire simultaneously. Your job is to synthesize the structured output. Do not re-run SSH commands yourself.
Setup: Add a vps alias to ~/.ssh/config pointing to your server, or edit scripts/collect-vps.sh to change the SSH target.
~/.claude/commands/vps-audit/scripts/collect-vps.shContainer names in the output have Coolify UUID suffixes stripped already.
From SYSTEM: hostname, OS, kernel, uptime, load average. From RECENT_LOGINS: flag any unfamiliar login sources.
From RESOURCES: CPU model/cores, RAM total/used/available, disk used/total on /, swap pressure.
From CONTAINERS and CONTAINER_STATS. Group containers by project (infer from container name prefixes).
For each container: status (healthy / unhealthy / up N days), CPU%, memory, exposed ports.
Flag any container that is: unhealthy, exited/stopped, >10% CPU sustained, >500MB memory.
From TRAEFIK_ROUTES - present as a table:
| Domain | Upstream | TLS |
|---|
From DOCKER_STORAGE: images / containers / volumes / build cache totals. From VOLUMES dangling section: list any orphaned volumes explicitly.
From SYSTEMD_SERVICES: note status of key services - tailscaled, fail2ban, docker, containerd, cron, sshd. Flag any that are absent or failing.
From LISTEN_PORTS and FIREWALL, categorize by bind address:
From TAILSCALE: server Tailscale IP, which devices are online.
From FS_DIRS passwd lines: users with shell access. Flag any unfamiliar login source in RECENT_LOGINS.
Keep the report dense. Flag anything that needs action.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.